Yelp: Privilege Escalation - A Non Owner User Who Does not Have access to the user management can invite other users to the restaurant page

Privilege escalation vulnerability was discovered where a non-owner user without access to user management could invite other users to the restaurant page...

CVE-2024-1977

The Restaurant Solutions – Checklist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Checklist points in version 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inje...

WordPress Restaurant Solutions Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Solutions Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-1977 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 74398097a9c3 Credits José Adán Hernández Flores Required...

WordPress plugin Restaurant Solutions - Checklist security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Restaurant Solutions – Checklist 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting

Description The Restaurant Solutions – Checklist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Checklist points in version 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

PT-2024-18465 · WordPress · The Restaurant Solutions – Checklist

Name of the Vulnerable Software and Affected Versions: The Restaurant Solutions – Checklist plugin for WordPress version 1.0.0 Description: The issue is related to Stored Cross-Site Scripting via the Checklist points due to insufficient input sanitization and output escaping. This allows...

CVE-2024-1749

A vulnerability, which was classified as problematic, has been found in Bdtask Bhojon Best Restaurant Management Software 2.9. This issue affects some unknown processing of the file /dashboard/message of the component Message Page. The manipulation of the argument Title leads to cross site...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in Bdtask Bhojon Best Restaurant Management Software 2.9. This issue affects some unknown processing of the file /dashboard/message of the component Message Page. The manipulation of the argument Title leads to cross site...

CVE-2024-1749

CVE-2024-1749 concerns Bdtask Bhojon Best Restaurant Management Software 2.9. The issue is a Cross-Site Scripting in the Message Page component (file /dashboard/message) triggered by manipulation of the Title argument, with network-based remote potential and user interaction required. Affects unk...

CVE-2024-1749 Bdtask Bhojon Best Restaurant Management Software Message Page message cross site scripting

A vulnerability, which was classified as problematic, has been found in Bdtask Bhojon Best Restaurant Management Software 2.9. This issue affects some unknown processing of the file /dashboard/message of the component Message Page. The manipulation of the argument Title leads to cross site...

Bdtask Bhojon Best Restaurant Management Software Cross-Site Scripting Vulnerability

Bdtask Bhojon Best Restaurant Management Software is a restaurant management software from Bdtask Bangladesh. A cross-site scripting vulnerability exists in Bdtask Bhojon Best Restaurant Management Software version 2.9, which stems from unknown handling of /dashboard/message in the component...

PT-2024-18274 · Unknown · Bdtask Bhojon Best Restaurant Management

Name of the Vulnerable Software and Affected Versions: Bdtask Bhojon Best Restaurant Management Software version 2.9 Description: A problematic issue has been found in the software, affecting the processing of the file /dashboard/message of the component Message Page. The manipulation of the...

CVE-2023-51403

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 1.8...

CVE-2023-51403

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 1.8...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 1.8...

CVE-2023-51403 WordPress Restaurant Reservations Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 1.8...

CVE-2023-51403 WordPress Restaurant Reservations Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 1.8...

CVE-2023-51403

CVE-2023-51403 refers to a stored cross-site scripting vulnerability in the WordPress plugin Restaurant Reservations by Nicdark, caused by improper neutralization of input during web page generation. The issue affects Restaurant Reservations versions up to 1.8 (n/a through 1.8). Exploitation coul...

WordPress Plugin Restaurant Reservations Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

CVE-2024-1268

A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file updateproduct.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the...